The administrator can modify domain user accounts and user groups when the NAS joins an AD domain or connects to an LDAP server.